Private marketplaces for administrators
To create and manage a private marketplace, you must be signed into the management account or the delegated administrator account for private marketplace. You must also have the AWS Identity and Access Management (IAM) permissions in the AWSPrivateMarketplaceAdminFullAccess IAM policy. For more information about applying this policy to users, groups, and roles, see Creating a private marketplace administrator.
Note
If you're a current private marketplace customer without the AWS Organizations integration for private marketplace, you can create and manage a private marketplace from any account in your organization that has the AWSPrivateMarketplaceAdminFullAccess IAM policy.
This section includes tasks that you can complete as a private marketplace administrator through the AWS Marketplace website. You can also manage private marketplaces using the AWS Marketplace Catalog API. For more information, see Working with a private marketplace in the AWS Marketplace Catalog API Reference.
Getting started with private marketplace
To get started with private marketplace, ensure you're signed into your AWS management
account, navigate to Private
Marketplace
-
Trusted access – You must enable trusted access for AWS Organizations, which allows the management account of an organization to provide or revoke access for their AWS Organizations data for an AWS service. Enabling trusted access is critical for private marketplace to integrate with AWS Organizations and designate private marketplace as a trusted service in your organization.
-
Service-linked role – You must enable the private marketplace service-linked role, which resides in the management account and includes all the permissions that private marketplace requires to describe AWS Organizations and update private marketplace resources on your behalf. For more information on the service-linked role, see Using roles to configure Private Marketplace in AWS Marketplace.
Note
Current private marketplace customers can enable settings for your private marketplace
by navigating to the Private Marketplace administrator's page and
choosing Settings. By enabling trusted access for AWS Organizations and creating
a service-linked role, you can utilize features, such as associating OUs to private
marketplace experiences and registering a delegated administrator. When enabled, only the
management account and delegated administrator account can create and manage marketplace
experiences, with existing resources transferred to the management account and shared only
with the delegated administrator. Disabling trusted access will remove private marketplace
governance for your organization. There are no account groups displayed in your private
marketplace. To view your organization’s governance at different levels, use the
Organization structure page. For questions or support, contact us
